Jean-Gabriel Gill-Couture
a0c1da4c51
All checks were successful
Run Check Script / check (pull_request) Successful in 3m24s
- builder: port or health_checked_port (+ ClusterIP Service, HTTP probes), typed env (EnvValue), pull secret, replicas, recreate, resources, wait - labels/selector: component, managed-by, part-of (same as the removed Application lowering, so its Deployments apply in place) - restricted pod: non-root, RuntimeDefault seccomp, drop ALL, no SA token - lamp: runs as its uid 1000 user and gets the Service its Ingress targets; its selector changes from app=<name>, so delete an existing lamp Deployment once - examples: frontends on nginx-unprivileged (8080); docs follow the API
14 lines
353 B
Docker
14 lines
353 B
Docker
FROM node:22-alpine AS build
|
|
WORKDIR /app
|
|
COPY package.json ./
|
|
RUN npm install
|
|
COPY . .
|
|
RUN npm run build
|
|
|
|
FROM nginxinc/nginx-unprivileged:alpine
|
|
COPY --from=build /app/dist /usr/share/nginx/html
|
|
COPY nginx.conf.template /etc/nginx/templates/default.conf.template
|
|
COPY --chmod=755 entrypoint.sh /entrypoint.sh
|
|
EXPOSE 8080
|
|
ENTRYPOINT ["/entrypoint.sh"]
|